CVE-2026-61372

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

UBUNTU-CVE-2026-61372

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

CVE-2026-61372

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

CVE-2026-61372 Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

EUVD-2026-52338

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

Linux Distros Unpatched Vulnerability : CVE-2026-61372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, confluent-kafka-jre-bcfips, spark-kubernetes-operator, reposilite, jenkins, tez, apache-jena-fuseki, apache-hop, traccar, strimzi-kafka-operator-fips, druid, cruise-control-fips, cruise-control, neo4j, kafka, akhq, apache-hop-fips,...

CVE-2026-2332 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, spark-kubernetes-operator, reposilite, cloudwatch-exporter, pinot-fips, celeborn, jenkins, apache-nifi, apache-jena-fuseki, apache-hop, strimzi-kafka-operator-fips, druid, cruise-control-fips, wso2is, cruise-control, clojure-tools,...

GHSA-355H-QMC2-WPWF vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, spark-kubernetes-operator, reposilite, cloudwatch-exporter, pinot-fips, celeborn, jenkins, apache-nifi, apache-jena-fuseki, apache-hop, strimzi-kafka-operator-fips, druid, cruise-control-fips, wso2is, cruise-control, clojure-tools,...

CVE-2026-34480 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, commercial-elasticsearch, apache-activemq-fips, spark-kubernetes-operator, apache-activemq-artemis, celeborn, pinot-fips, apache-activemq, pinot, nuxeo, apache-jena-fuseki, apache-hop, wavefront-proxy, camunda, zipkin, hadoop-fips,...

GHSA-3PXV-7CMR-FJR4 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, commercial-elasticsearch, apache-activemq-fips, spark-kubernetes-operator, apache-activemq-artemis, celeborn, pinot-fips, apache-activemq, pinot, nuxeo, apache-jena-fuseki, apache-hop, wavefront-proxy, camunda, zipkin, hadoop-fips,...

CVE-2026-23901 vulnerabilities

Vulnerabilities for packages: apache-jena-fuseki, neo4j...

Linux Distros Unpatched Vulnerability : CVE-2021-33192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena...

JVN#90566559: Apache Jena Fuseki vulnerable to path traversal

Jena Fuseki provided by The Apache Software Foundation contains the following vulnerability. Path traversal CWE-22 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N Base Score 2.7 CVE-2025-49656 Impact A remore...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the configuration file upload process. An attacker with administrative privileges could create datasets with arbitrary names and locations, causing unintended behavior and potentially causing a denial of...

CVE-2025-49656

Users with administrator access can create databases files outside the files area of the Fuseki server. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which fixes the issue...

CVE-2021-33192

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

Cross-site scripting in Apache Jena Fuseki

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

GHSA-PHWJ-86VX-CFJC Cross-site scripting in Apache Jena Fuseki

A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 inclusive...

Apache Jena Fuseki Cross-Site Scripting Vulnerability

Apache Jena Fuseki is a SPARQL server from the Apache Foundation USA. It can run as an operating system service, as a Java Web application WAR file, and as a standalone server. A cross-site scripting vulnerability exists in Apache Jena Fuseki versions 2.0.0 through 4.0.0, which can be exploited b...